Why git commit signing matters and how to implement it.